URLhaus Database

You are currently viewing the URLhaus database entry for https://greenreset.com/aeu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650151
URL: https://greenreset.com/aeu/
URL Status:Offline
Host: greenreset.com
Date added:2023-06-02 11:43:29 UTC
Last online:2023-06-05 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-02 11:45:45 UTC to abuse{at}hostgator[dot]com)
Takedown time:2 days, 12 hours, 14 minutes Poor (down since 2023-06-05 00:00:42 UTC)
Tags:BB30 geofenced js Qakbot link Quakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_B689_Jun_2.zipzip f319f6835d9d93d032de4f150fa81b9d186a9f5584bfad9d01c5308311dca131Virustotal results 22.58% 
2023-06-03document_B186_Jun_2.zipzip 61fc1b518a5c271fa88fd62f1def1ad4f2e1e45d44fa47c5c341303d62f94061Virustotal results 25.00% 
2023-06-03document_F962_Jun_2.zipzip 1a368dec0fb14549e57d9e5f2fab3bb43ed11fff5b54689d37f586760305882en/a 
2023-06-02document_D783_Jun_2.zipzip c75e9268062913fb4c4d441103fd86f22bd6b7982fff9452e35e0985ed402ae8Virustotal results 17.74% 
2023-06-02document_D539_Jun_2.zipzip ec4101236462ee13b791885722c285dd6100a32e96d51f813d9c3bd03216af71n/a Quakbot
2023-06-02document_E124_Jun_2.zipzip 76f388932bc8a79fcd2dca6cd58768173fd055e7438e0b1f62c207959e16a2ean/a